CVE-2026-37226
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-37226
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
FlexRIC v2.0.0 crashes when the iApp receives an E42_RIC_SUBSCRIPTION_REQUEST referencing a non-existent E2 Node. The lookup function returns NULL, which is enforced by assert() in Debug builds (SIGABRT) and dereferenced in Release builds (SIGSEGV). A remote unauthenticated attacker can crash the iApp process (port 36422) by sending a subscription request with an arbitrary global_e2_node_id.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2026-37226
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-37226
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-37226 (1)
Other References for CVE-2026-37226 (1)
Same Patch Batch · n/a · 2026-06-01 · 34 CVEs total
| CVE-2026-10273 | 7.3 HIGH | php-censor Webhook Endpoint GitBuild.php os command injection |
| CVE-2026-10240 | 6.3 MEDIUM | JeecgBoot test server-side request forgery |
| CVE-2026-10239 | 6.3 MEDIUM | JeecgBoot edit WordUtil.addImage server-side request forgery |
| CVE-2026-10229 | 5.3 MEDIUM | Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_meshes heap-based overflow |
| CVE-2026-10232 | 5.3 MEDIUM | Assimp ASE File scene.cpp ~aiNode use after free |
| CVE-2026-10231 | 5.3 MEDIUM | Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp extract_anim_value heap-based overflow |
| CVE-2026-10230 | 5.3 MEDIUM | Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_animations heap-based overflow |
| CVE-2026-10275 | 5.0 MEDIUM | OpenSC pkcs11-tool Key Generation pkcs11-tool.c test_kpgen_certwrite buffer overflow |
| CVE-2026-10294 | 4.3 MEDIUM | PackageKit API pk-transaction.c g_file_test improper authorization |
| CVE-2026-10233 | 3.3 LOW | Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_sequence_infos out-of-bounds |
| CVE-2025-70099 | lwext4 1.0.0空指针解引用导致拒绝服务 | |
| CVE-2026-37234 | FlexRIC v2.0.0 SCTP资源泄露漏洞 | |
| CVE-2026-37230 | FlexRIC v2.0.0近实时RIC远程拒绝服务漏洞 | |
| CVE-2026-37229 | FlexRIC v2.0.0 E2AP协议拒绝服务漏洞 | |
| CVE-2026-37231 | FlexRIC v2.0.0 xApp ID重复导致iApp崩溃 | |
| CVE-2026-37233 | FlexRIC v2.0.0 xApp隔离机制授权绕过漏洞 | |
| CVE-2026-37228 | FlexRIC v2.0.0断言绕过漏洞 | |
| CVE-2026-37232 | OpenAirInterface5G 2.4.0空指针除零致基站崩溃 | |
| CVE-2026-37235 | FlexRIC v2.0.0 远程未认证身份伪造漏洞 | |
| CVE-2026-37222 | FlexRIC v2.0.0近实时RIC远程拒绝服务漏洞 |
Showing top 20 of 34 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-10294
PackageKit API pk-transaction.c g_file_test improper authori - CVE-2026-10275
OpenSC pkcs11-tool Key Generation pkcs11-tool.c test_kpgen_c - CVE-2026-10273
php-censor Webhook Endpoint GitBuild.php os command injectio - CVE-2026-10240
JeecgBoot test server-side request forgery - CVE-2026-10239
JeecgBoot edit WordUtil.addImage server-side request forgery
V. Comments for CVE-2026-37226
No comments yet